Hello, Can splunk python sdk be used along with a summary index? How? I wish to schedule periodic querying and extracting the data from Splunk for which I usually used the SDK like this and it wor...
See more...
Hello, Can splunk python sdk be used along with a summary index? How? I wish to schedule periodic querying and extracting the data from Splunk for which I usually used the SDK like this and it works for 1 time run as I removed my "collect index ..." code from my query - service = client.connect( host=HOST, port=PORT, username=USERNAME, password=PASSWORD) kwargs_oneshot = {"earliest_time": "-1h", "latest_time": "now", "output_mode": 'json', "count" : 100} searchquery_oneshot = "search <query>" # if i want collected index results to be used below periodically i.e. every 1 hour, what change do I make in my code? oneshotsearch_results = service.jobs.oneshot(searchquery_oneshot, **kwargs_oneshot) Thanks